krakenelektro[.]net

The domain krakenelektro.net has been identified as an active brand impersonation threat targeting Kraken, a major cryptocurrency exchange platform. Analysis indicates this site operates as a phishing portal, presenting a fraudulent interface designed to harvest user credentials, financial details, and sensitive account information. The domain currently remains operational and poses a high risk to unsuspecting users seeking legitimate Kraken services. Infrastructure analysis reveals the domain was registered on June 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. It resolves to the IP address 198.13.158.7, which has been linked to other suspicious activities in threat intelligence repositories. The site employs a Let's Encrypt SSL certificate, providing a false sense of security to visitors. Detection metrics show the domain is flagged by 2 of 95 security vendors on VirusTotal, appears in 2 AlienVault OTX threat intelligence pulses, and is listed on one security blocklist. The page title, 'Kraken — интернет-магазин электроники, гаджетов и комплектующих,' further confirms the intent to deceive users by combining Kraken’s brand with unrelated product categories. Gridinsoft’s trust score for this domain is 0/100, reinforcing its malicious classification. The domain remains active as of this analysis, continuing to pose a significant threat to Kraken users and the broader cryptocurrency community. Organizations and individuals are advised to block access to 198.13.158.7 and krakenelektro.net at the network level. Users should be educated on verifying domain authenticity before entering credentials, particularly for financial platforms. Security teams are recommended to monitor for connections to the identified IP and domain, as well as to review logs for any prior interactions. Immediate reporting to relevant authorities and threat intelligence platforms is encouraged to aid in takedown efforts.